CVE-2014-9970 PUBLISHED

jasypt before 1.9.2 allows a timing attack against the password hash comparison.

EPSS 0.70% · 71.9th percentile

Risk Scores

EPSS Score
0.70%
71.9th percentile

Affected Products

VendorProductVersions
Ubuntu:16.04:LTSjasypt0, 1.8-3

Timeline

References

Open in Interactive Console →